Re: [users@httpd] SNI SSL per domain?

2016-09-07 Thread Felipe Gasper
> On 7 Sep 2016, at 9:43 PM, Marat Khalili wrote: > > Did you consider having two instances of Apache: one for handling SSL with > vhost per certificate, and one for actual web sites with vhost per site? > First one will proxy requests to the second. Some people do it this way for > performan

Re: [users@httpd] SNI SSL per domain?

2016-09-07 Thread Marat Khalili
Did you consider having two instances of Apache: one for handling SSL with vhost per certificate, and one for actual web sites with vhost per site? First one will proxy requests to the second. Some people do it this way for performance reasons, but it lets you be more flexible with certificates

Re: [users@httpd] SNI SSL per domain?

2016-09-07 Thread Felipe Gasper
Reviving this thread … This would mean that every vhost will needs its own common.conf file, which, on a server with thousands of vhosts, will make for expensive loads of the configuration file. mod_macro in 2.4 is another route we may explore, but we have some really complex vhost templating